CVS: cvs.openbsd.org: src

CVSROOT:	/cvs
Module name:	src
Changes by:	[email protected]	2026/07/24 07:44:03

Modified files:
	usr.sbin/vmd   : control.c 

Log message:
Reject invalid payload sizes at vmd(8) control boundary.

When we introduced agressive parsing and santization of imsg objects,
it introduced the ability for a control socket client to force vmd
to exit via fatal() calls. A simple solution is to validate just
the size of the object at the control process boundary as that's
the primary logic for triggering fatal() calls. This may need a
greater redesign but that would require inspecting all imsg
deseralization call points. For now, the author's proposal is fine.

Report and diff by Andrew Griffiths.

ok hshoexer@